...
In operator portal operators can have “Is external federation account” flag enabled. This flag is synced with Ocean Identity provider - user gets special role land_brokered_identity, which marks that user can login with external provider.
To find this setting go to Ocean → Security → Access management → Choose one operator → Find this setting:
...